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Hashing is the transformation of a string of character s into a usually shorter fixed-length value or 
key that represents the original string. Hashing is used to index and retrieve items in a database 
because it is faster to find the item using the shorter hashed key than to find it using the original 
value. It is also used in many encryption algorithms. 

As a simple example of the using of hashing in databases, a group of people could be arranged in a 
database like this: 

Abernatby, Sara 
Epperdingle, Roscoe 
Moore, Wilfred 
Smith, David 

(and many more sorted into alphabetical order} 

Each of these names would be the key in the database for that person's data. A database search 
mechanism would first have to start looking character-by-character across the name for matches 
until it found the match (or ruled the other entries out). But if each of the names were hashed, it 
might be possible (depending on the number of names in the database) to generate a unique four- 
digit key for each name. For example: 

7864 Abernathy, Sara 
9802 Epperdingle, Roscoe 
1990 Moore, Wilfred 
8822 Smith, David 
(and so forth) 

A search for any name woufd first consist of computing the hash value (using the same hash 
function used to store the item) and then comparing for a match using that value, ft would, in 
general, be much faster to find a match across four digits, each having only 10 possibilities, than 
across an unpredictable value length where each character had 26 possibilities. 

The hashing algorithm is called the hash function (and probably the term is derived from the idea 
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that the resulting hash value can be thought of as a "mixed up" version of the represented value). In 
addition to faster data retrieval, hashing is also used to encrypt and decrypt digital signatures (used 
to authenticate message senders and receivers). The digital signature is transformed with the hash 
function and then both the hashed value (known as a message-digest) and the signature are sent in 
separate transmissions to the receiver. Using the same hash function as the sender, the receiver 
derives a message-digest from the signature and compares it with the message-digest it also 
received. They should be the same. 

The hash function is used to index the original value or key and then used later each time the data 
associated with the value or key is to be retrieved. Thus, hashing is always a one-way operation. 
There's no need to "reverse engineer" the hash function by analyzing the hashed values. In fact, the 
ideal hash function cant be derived by such analysis. A good hash function also should not produce 
the same hash value from two different inputs. If it does, this is known as a collision. A hash 
function that offers an extremely low risk of collision may be considered acceptable. 

Here are some relatively simple hash functions that have been used: 

• The division-remainder method: The size of the number of items in the table is estimated. 
That number is then used as a divisor into each original value or key to extract a quotient 
and a remainder. The remainder is the hashed value. (Since this method is liable to produce 
a number of collisions, any search mechanism would have to be able to recognize a collision 
and offer an alternate search mechanism.) 

• Folding: This method divides the original value (digits in this case) into several parts, adds 
the parts together, and then uses the last four digits (or some other arbitrary number of digits 
that will work ) as the hashed value or key. 

• Radix transformation: Where the value or key is digital, the number base (or radix) can be 

- changed resulting in a different sequence of digits. (For example, a decimal numbered key 
could be transformed into a hexadecimal numbered key.) High-order digits could be 
discarded to fit a hash value of uniform length. 

• Digit rearrangement: This is simply taking part of the original value or key such as digits in 
positions 3 through 6\ reversing their order, and then using that sequence of digits as the 
hash value or key. 
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A hash function that works well for database storage and retrieval might not work as for 
cryptographic or error-checking purposes. There are several well-known hash functions used in 
cryptography. These include the message-digest hash functions MD2 , MD4 , and MPS , used for 
hashing digital signatures into a shorter value called a message -digest, and the Secure Hash 
Algorithm (SHA), a standard algorithm, that makes a larger (60-bit) message digest and is similar to 
MD4. 

» Find products and vendors related to hashing. 
Read more about it: 

» What Is a Hash Function? . an explanation from RSA Security, mentions the MD2, MD4, MD5, 
and SHA algorithms. — . - i 

» This lecture on Hashing requires some math background, but may help you understand what 
hashing 57 — — - - 


[gj RELEVANT SPONSORED LINKS 

Di gital Signatures 

DBstgn provides applications with 
easy digital signature security 
www.gradkell.com 

Digital Signature 

Easy to use digital signature 
software or signature service, 
www.alptia trust, com 


http ://searchdatab ase . tech t^ 


9/20/2004 


PAGE 18/19 * RCVD AT 9/21S20O4 3:32:53 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-2/3 k DNIS: 7467239 * CSID:919 544 5920 * DURATION (mm-ss): 11-20 


BEST AVAILABLE COPY 


Sep 21*04 03: 49p 

Application rfo. 09/747,054; Amendment and Response mailed September 2 U 2004; 
Express Mail No? EV406623305US; Office Action dated June 22, 2004; Page 1 5 of 15 


919-544-5920 p. 19 

APPENDIX A 


Digi tal Signature s 

Get Security Visualization - Manage 

Multiple Firewalls From One Console 

ca.com 

Digital Signatures 

Secure and Protect Your Online Code 
Learn More about Content Signing 
http:/A*ww,verisign .com 

ePad E-Sig nature Products 

Cut Transaction Costs by 50% 
Eliminate paper legally & securely 
www.epadlink.com 


Last updated on: Mar 12, 2002 

« Back to previous page Go to whatis.com home page » 


igj WHATS NEW 
on search Data base 

1 . SQL Server basics learning guide 

2. Visit the Expert Answer Center 

3. Free database white papers 

4. Register now for free newsletters? 


About Us | Contact Us I For Advertisers | For Business Partners | Reprints 
5carchDarabase.com is pan of the TechTarget network of industry-specific IT Web sites 


SEARCH 


WINDOWS 

SearchExchange.com 

SearchVB.com 

SearchWin2000.com 

SearchWindowsSecurity.com 

Labmice.net 

MyITForum.com 

APPLICATIONS 

SearchCRM.com 
SearchSAP,com 


ENTERPRISE IT MANAGEMENT 

SearchCIO.com 
SearchSmaIlBizfT.com 

CORE TECHNOLOGIES 

SearchDatabase.com 

SearchMobileComputtng.com 

SearchNetworking.com 

SearchOracle.com 

SearchSecurity.com 

SearchStorage.com 

SearchWebServices.com 

Whatls.com 


PLATFORMS 

Search390.com 
Search400.com 
SearchDomino.com 
SearchEnterpriseLinux.com 


TechTarget Expert Answer Center j TechTarget Enterprise IT Conferences | TechTarget Corporate Web SHe | Media Kit 


Explore SearchTechTarget.com , the guide to the TechTarget network of industry-specific IT Web sites. 
All Rights Reserved, Copyright 2000 - 2004, TechTarget 


Read our P 


http://seaxchdataba^e.techtaxget.com/sDeJ5niti 


9/20/2004 


PACE 19/19 * RCVD AT 9/21/2004 3:32:33 PM [Eastern Daylight Time) * SVR:USPTO-EFXRF-2/3 * DNIS:7467239 * CSID:919 544 5920 • DURATION (mm-ss):1 1-20 


BEST AVAILABLE COPY 


